This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/UDY2HDyFl77CPOX4Htn0Pi3kyOA.roa File: UDY2HDyFl77CPOX4Htn0Pi3kyOA.roa (raw, json) Hash identifier: bc7atEIrT/sE9wxUJS6KJvtPGbS/vBzLhwKBt1msWHM= Subject key identifier: 50:36:36:1C:3C:85:97:BE:C2:3C:E5:F8:1E:D9:F4:3E:2D:E4:C8:E0 Certificate issuer: /CN=4da84d247ce37cdccf06e1571d226a2b85677bcd Certificate serial: 019B7DCB11BFCADF632B0CFF4C99AFB43A72 Authority key identifier: 4D:A8:4D:24:7C:E3:7C:DC:CF:06:E1:57:1D:22:6A:2B:85:67:7B:CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/UDY2HDyFl77CPOX4Htn0Pi3kyOA.roa Signing time: Fri 02 Jan 2026 08:20:18 +0000 ROA not before: Fri 02 Jan 2026 08:20:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44620 IP address blocks: 93.180.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.crl rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.mft rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 11:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:11:bf:ca:df:63:2b:0c:ff:4c:99:af:b4:3a:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4da84d247ce37cdccf06e1571d226a2b85677bcd Validity Not Before: Jan 2 08:20:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5036361c3c8597bec23ce5f81ed9f43e2de4c8e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:2c:2e:e1:3c:0e:a4:d5:98:33:0e:d7:09:72: 0f:f6:e5:a5:a9:35:29:59:f0:17:97:bb:80:4a:2f: 82:7f:26:ae:51:49:cd:78:ae:3d:54:6f:5b:6a:ea: 19:1c:a6:03:b7:17:ef:a2:a3:63:77:90:40:a9:d4: bc:40:a4:a2:31:cc:70:1b:bd:d0:c7:09:ac:6d:8d: 33:b8:52:5a:d4:f5:89:2c:58:76:d3:12:7c:c6:aa: 46:46:a8:37:f3:e1:b8:02:6c:36:16:99:88:99:98: 32:fc:b2:b7:01:91:db:4a:bb:f2:64:a5:16:63:3c: 8e:9a:bb:da:dc:6e:c0:11:eb:36:8a:72:e6:32:08: c5:05:3d:b3:99:38:8c:4f:ee:dd:a0:ff:a9:85:68: fb:36:2d:7b:f1:56:44:ba:87:b8:78:f2:b8:b1:84: 38:66:da:f4:d9:e9:dc:b2:2b:80:4f:59:d9:98:2a: 5e:64:4f:2d:c2:e1:7f:ec:0b:e6:2c:19:28:51:01: 6e:d1:f2:be:59:54:7c:e4:f1:af:d5:19:c4:79:bc: e9:9a:9c:97:1a:ac:07:f8:51:c7:b7:8d:e6:69:c5: 1e:da:67:da:c4:75:4b:c2:fd:ac:9a:0f:fd:16:e1: 70:af:0c:a8:cc:6d:56:f7:00:82:c7:b4:65:af:32: bb:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:36:36:1C:3C:85:97:BE:C2:3C:E5:F8:1E:D9:F4:3E:2D:E4:C8:E0 X509v3 Authority Key Identifier: keyid:4D:A8:4D:24:7C:E3:7C:DC:CF:06:E1:57:1D:22:6A:2B:85:67:7B:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/UDY2HDyFl77CPOX4Htn0Pi3kyOA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.180.134.0/24 Signature Algorithm: sha256WithRSAEncryption 33:26:63:61:ab:63:47:06:bc:33:c0:45:7e:b5:1b:15:63:e9: fb:8f:af:d1:03:cc:b7:1c:3f:af:33:4b:dd:70:27:04:bb:f7: 25:05:2d:f4:54:a3:49:18:d3:70:ac:6c:ff:85:22:f7:e0:61: 33:7d:d2:9e:3d:26:e7:b9:05:93:e2:e0:b5:df:3d:b9:d1:fe: 59:9b:0d:ee:7c:83:6f:8b:c2:97:1a:10:98:0f:79:01:51:11: 80:a2:28:f4:ce:85:2f:c9:e0:12:fb:df:a3:14:38:e5:8f:14: b7:56:06:af:92:7c:79:84:2b:47:26:20:a4:a2:7e:bb:f5:11: 4b:6a:48:3d:26:00:2b:0c:89:18:16:a2:1c:60:2e:f9:08:bf: df:2c:da:91:4b:dc:25:31:1e:04:66:3f:28:5c:08:87:0a:34: fc:b3:0d:1a:95:c3:ef:c3:a7:4a:74:07:cd:ec:63:53:c7:da: b0:00:b3:e1:8d:54:76:f5:9d:03:3c:b7:9e:de:fd:43:5c:6d: e3:f2:62:31:68:2f:df:14:6c:43:d3:da:c8:fa:00:fc:11:6c: 8e:29:66:d2:15:5e:87:5a:7c:27:4e:38:4d:db:2b:f6:45:37: e9:96:56:de:43:7d:cb:b1:38:f2:00:ca:ae:0c:41:a7:e1:60: 7a:c4:be:86 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yxG/yt9jKwz/TJmvtDpyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkYTg0ZDI0N2NlMzdjZGNjZjA2ZTE1NzFkMjI2YTJiODU2 NzdiY2QwHhcNMjYwMTAyMDgyMDE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MDM2MzYxYzNjODU5N2JlYzIzY2U1ZjgxZWQ5ZjQzZTJkZTRjOGUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSwu4TwOpNWYMw7XCXIP9uWlqTUp WfAXl7uASi+CfyauUUnNeK49VG9bauoZHKYDtxfvoqNjd5BAqdS8QKSiMcxwG73Q xwmsbY0zuFJa1PWJLFh20xJ8xqpGRqg38+G4Amw2FpmImZgy/LK3AZHbSrvyZKUW YzyOmrva3G7AEes2inLmMgjFBT2zmTiMT+7doP+phWj7Ni178VZEuoe4ePK4sYQ4 Ztr02encsiuAT1nZmCpeZE8twuF/7AvmLBkoUQFu0fK+WVR85PGv1RnEebzpmpyX GqwH+FHHt43macUe2mfaxHVLwv2smg/9FuFwrwyozG1W9wCCx7RlrzK79QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFA2Nhw8hZe+wjzl+B7Z9D4t5MjgMB8GA1UdIwQY MBaAFE2oTSR843zczwbhVx0iaiuFZ3vNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGFoTkpIempmTnpQQnVGWEhTSnFLNFZuZTgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC8yMTBmYmItYWE2ZS00OWM5LTkxOGIt NTU1OGE4YjUzZTNkLzEvVURZMkhEeUZsNzdDUE9YNEh0bjBQaTNreU9BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC8yMTBmYmItYWE2ZS00OWM5LTkxOGItNTU1OGE4YjUzZTNk LzEvVGFoTkpIempmTnpQQnVGWEhTSnFLNFZuZTgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXbSGMA0G CSqGSIb3DQEBCwUAA4IBAQAzJmNhq2NHBrwzwEV+tRsVY+n7j6/RA8y3HD+vM0vd cCcEu/clBS30VKNJGNNwrGz/hSL34GEzfdKePSbnuQWT4uC13z250f5Zmw3ufINv i8KXGhCYD3kBURGAoij0zoUvyeAS+9+jFDjljxS3Vgavknx5hCtHJiCkon679RFL akg9JgArDIkYFqIcYC75CL/fLNqRS9wlMR4EZj8oXAiHCjT8sw0alcPvw6dKdAfN 7GNTx9qwALPhjVR29Z0DPLee3v1DXG3j8mIxaC/fFGxD09rI+gD8EWyOKWbSFV6H WnwnTjhN2yv2RTfpllbeQ33LsTjyAMquDEGn4WB6xL6G -----END CERTIFICATE-----Generated at Wed Jan 21 18:58:49 2026 by rpki-client